This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft
File: AC555447BA62C39107F16BF572F82A417F728DBF.mft (raw, json)
Hash identifier: aktVI91gVABOKAdAC2XetpjV//2m4P4YaQ7oeVvkaZc=
Subject key identifier: 55:9A:83:D4:E0:B0:AA:1B:6B:F2:54:4C:07:93:B9:63:81:CD:E0:A8
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Certificate issuer: /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial: 684A8C98C9029C3FA813113A03F375F26AE4F6B1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft
Manifest number: 066C
Signing time: Tue 09 Dec 2025 11:01:55 +0000
Manifest this update: Tue 09 Dec 2025 10:56:55 +0000
Manifest next update: Fri 12 Dec 2025 19:49:55 +0000
Files and hashes: 1: AS38060.roa (hash: eOcmz88SeKGkb0DMwImS4Yyf8BOpXzai0Cr7w/OsMC8=)
2: AC555447BA62C39107F16BF572F82A417F728DBF.crl (hash: 8lyfMrRAoB3SVObDtHV4YZPQ7Jyad2lsqrUGbZ2qD7Y=)
3: AS45493.roa (hash: rZ+bNzJQC/viqI5H1YlJtVUU+yt/vWuH3IoVopKxF0M=)
4: AS38482.roa (hash: +V5srNll5JWuujL5oOZQFFebjWMEWEKgHQkXLB0MaPU=)
5: AS17451.roa (hash: eTISNOGWkLh6jsaCIOFgGp+dDYjzw6/ISiCvl61KBhc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl
rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 14:28:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:4a:8c:98:c9:02:9c:3f:a8:13:11:3a:03:f3:75:f2:6a:e4:f6:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
Validity
Not Before: Dec 9 10:56:55 2025 GMT
Not After : Dec 12 19:49:55 2025 GMT
Subject: CN=559A83D4E0B0AA1B6BF2544C0793B96381CDE0A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a9:5e:fd:f4:61:1a:59:bb:91:79:2a:75:9b:
06:b5:55:60:1d:66:6a:5d:e9:b6:49:9d:57:d7:29:
3f:8c:16:2c:aa:41:ae:1c:8a:b4:27:2d:93:04:b3:
40:16:d9:dd:21:be:73:ff:92:72:89:88:96:32:d9:
48:97:69:56:08:c8:03:94:b0:46:78:b4:7f:bc:18:
56:d0:34:f7:6c:93:c4:05:42:f0:7b:df:85:bc:f0:
c4:f3:4e:88:ab:5a:47:a5:63:94:a4:d9:51:ec:50:
0a:35:a9:bd:45:9d:a6:46:1c:1f:e2:71:2d:e8:10:
a0:7a:ea:7e:82:21:a2:eb:df:7d:05:f6:92:1a:f1:
be:36:09:3e:bd:cd:f1:f8:47:ef:c2:53:f5:80:a2:
a1:47:e8:76:06:f5:59:32:64:bf:a1:ec:7c:0d:f8:
48:63:93:3d:39:2e:8f:0e:84:4e:55:d9:c5:85:3f:
be:3f:21:a1:ac:d6:4f:6c:cb:69:1c:c6:0b:72:46:
81:23:68:06:30:24:38:6c:8c:27:0c:f0:48:39:ef:
e1:06:4d:7e:f8:41:71:17:d7:d7:e8:d7:6a:df:33:
ee:d8:a9:1a:78:aa:57:3c:a6:f6:7c:2f:77:2b:bd:
23:38:84:a6:00:3a:15:4e:14:e8:1d:35:f7:e1:15:
26:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9A:83:D4:E0:B0:AA:1B:6B:F2:54:4C:07:93:B9:63:81:CD:E0:A8
X509v3 Authority Key Identifier:
keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:76:70:25:4b:bd:66:cc:c8:e6:9e:3e:dc:0e:34:7b:f0:dc:
b6:7e:0c:f4:41:33:9b:46:66:a7:82:7e:8c:1d:78:c5:0c:c4:
fc:e5:67:c7:41:47:42:87:eb:a2:e4:ea:62:74:6a:a4:0a:03:
e6:da:0b:30:d7:c5:9e:9f:d3:30:6d:8b:2c:f6:6e:dc:d8:8f:
bc:12:be:2e:a9:c0:ad:e8:15:63:0c:52:9f:a5:93:0c:00:c5:
54:ed:f4:b0:cc:33:07:45:c1:f5:a3:21:11:20:39:5d:bd:f7:
4b:45:48:ff:72:3d:5e:a4:17:6e:5c:c2:0a:68:5b:ba:80:78:
15:b1:89:43:5d:e0:9d:90:2d:aa:f0:30:f2:42:ce:6c:57:53:
09:dd:c7:54:da:74:e9:84:08:81:95:5b:2a:f0:0d:03:15:24:
c9:14:d0:41:3f:ad:1e:18:bb:f6:6f:0a:a8:82:1d:9f:1f:f4:
f3:9a:49:62:fc:36:27:f1:a0:05:82:2a:0d:f8:58:3b:d3:53:
04:6a:fc:db:e5:01:f0:61:b0:3b:a3:f3:c4:00:e6:30:cd:28:
6e:7c:ca:6e:14:1b:b9:4e:0b:8f:a8:34:54:26:31:d9:5a:ae:
95:a6:1f:8a:5d:27:55:e0:85:f5:01:84:cb:dd:a4:f1:7f:81:
a4:0e:50:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 15:30:26 2025 by rpki-client